Re: disabling shell-escape

2014-05-11 Thread Shawn Zaidermann
I understand. There is definitely always that possibility that users will get a shell. However, can SELinux help in this case? Perhaps I can confined the users with basic access, one that does not allow a user to run any execution from their home or /tmp. We have a debian deployment but can

Re: disabling shell-escape

2014-05-11 Thread Suvayu Ali
Hi, On Sun, May 11, 2014 at 12:20:27PM -0700, Shawn Zaidermann wrote: I understand. There is definitely always that possibility that users will get a shell. However, can SELinux help in this case? Perhaps I can confined the users with basic access, one that does not allow a user to run any

Re: Correct syntax of send hook

2014-05-11 Thread Guy Gold
Derek: On Sat,May 10 06:49:PM, Derek Martin wrote: Mostly I reply here due to a curiosity: Why is 'messed' in single quotes here? I see people do this increasingly often, and I don't get why. Are you implying that the single quotes should have been escaped then ? ;) -- GG

Re: Correct syntax of send hook

2014-05-11 Thread Patrick Shanahan
* Guy Gold g...@merl.com [05-11-14 07:38]: On Sat,May 10 06:49:PM, Derek Martin wrote: Mostly I reply here due to a curiosity: Why is 'messed' in single quotes here? I see people do this increasingly often, and I don't get why. Are you implying that the single quotes should have been

Re: disabling shell-escape

2014-05-11 Thread David Champion
You don't need to jail postfix for your situation. Build Mutt with smtp support, and set smtp_server to localhost. Your SMTP processes will run in the global context, and mutt will only need a socket to that. * On 11 May 2014, Shawn Zaidermann wrote: I understand. There is definitely always

Re: Correct syntax of send hook

2014-05-11 Thread Chris Bannister
On Sun, May 11, 2014 at 07:54:16AM -0400, Patrick Shanahan wrote: * Guy Gold g...@merl.com [05-11-14 07:38]: On Sat,May 10 06:49:PM, Derek Martin wrote: Mostly I reply here due to a curiosity: Why is 'messed' in single quotes here? I see people do this increasingly often, and I don't

Re: Correct syntax of send hook

2014-05-11 Thread Mark Filipak
On 2014/5/11 11:08 PM, Chris Bannister wrote: -snip- More worrying are the strange ammendments that American English is imposing (or has imposed) on us people who speak the proper English! I'm sorry, but as an American I have to come out of lurk mode for this... What you tried to write, Chris,

Re: Correct syntax of send hook

2014-05-11 Thread Mark Filipak
On Sat,May 10 06:49:PM, Derek Martin wrote: Mostly I reply here due to a curiosity: Why is 'messed' in single quotes here? I see people do this increasingly often, and I don't get why. Are you a coder, Derek? I use single-quotes when I'm coding because it's faster; I don't have to hit the

Re: Correct syntax of send hook

2014-05-11 Thread Cameron Simpson
While I'm glad you've got your syntax working, it is often easier (and more flexible) to move tricky shell incantations off into a script. As an example, I run a specialish vim incantation as my mutt editor. My muttrc just says: set editor=muttedit and muttedit is a script in my bin